Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          z4akxAmMp17ecpC3hqpbV9YEfemP99p2qci2co3ev28=
Subject key identifier:   40:3D:D8:15:0F:3E:E5:36:CB:DB:DB:22:00:E2:76:6D:CF:56:CA:32
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       775DDDE8BD6651C1A7EAB7217A155323CC485FA6
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa
Signing time:             Wed 03 Apr 2024 20:16:13 +0000
ROA not before:           Wed 03 Apr 2024 20:11:13 +0000
ROA not after:            Wed 02 Apr 2025 20:16:13 +0000
asID:                     266506
IP address blocks:        170.244.183.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5d:dd:e8:bd:66:51:c1:a7:ea:b7:21:7a:15:53:23:cc:48:5f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Apr  3 20:11:13 2024 GMT
            Not After : Apr  2 20:16:13 2025 GMT
        Subject: CN=403DD8150F3EE536CBDBDB2200E2766DCF56CA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:3c:be:2d:6b:8c:ab:b9:f4:e7:c2:2e:8a:
                    23:e8:fc:dc:03:11:9f:75:10:23:37:b9:ce:85:90:
                    fd:2a:bf:2a:28:02:8c:57:99:91:47:c6:67:a6:13:
                    a8:65:a9:f3:c6:c0:59:a8:ad:0a:0f:fd:36:e9:56:
                    fa:50:8e:c0:cf:2b:c4:6a:39:da:c0:69:bd:4f:d2:
                    07:e3:9b:64:18:92:0d:85:74:1a:d3:7f:b7:0e:9e:
                    a0:d4:a6:55:b7:eb:88:01:12:2f:3e:0a:37:f5:cf:
                    ca:af:b0:1b:92:c0:fd:fb:94:16:25:10:4f:64:25:
                    4f:5f:d5:7d:24:48:17:49:38:36:7f:44:34:a8:4c:
                    19:77:e7:ab:ec:ff:40:8e:ff:6e:a9:8a:80:ac:c6:
                    38:87:7e:bd:7c:92:d4:ca:47:89:eb:d5:51:10:20:
                    93:6b:21:3f:1f:4e:36:f7:8b:f6:13:36:91:5d:fb:
                    85:c2:f1:fc:b2:f1:dd:5f:0e:cf:a1:b6:1c:3c:88:
                    4f:0b:9b:92:4d:26:c4:c9:fa:3f:85:5d:17:7c:84:
                    99:07:75:76:fc:e9:28:f5:bc:cc:6a:c5:e7:41:c2:
                    7b:b9:0e:8e:06:aa:6c:0a:cc:05:d2:38:b5:a3:9a:
                    37:52:ae:1e:70:9d:7b:6d:56:42:b6:d0:97:da:e8:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3D:D8:15:0F:3E:E5:36:CB:DB:DB:22:00:E2:76:6D:CF:56:CA:32
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138332e3132382f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.183.128/25

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:f5:5c:53:9a:9a:20:31:f6:de:0b:7d:20:e8:34:51:8c:
         18:d9:7a:6c:d2:c8:4c:00:7b:91:77:e1:aa:88:b9:8e:9f:f1:
         f5:0b:4b:42:23:99:02:2c:7f:89:fb:f3:a5:cb:49:48:ac:69:
         23:33:cc:6c:0a:d8:1a:a5:3a:0e:03:46:b3:0d:a2:96:fa:58:
         0e:31:c4:1c:a7:15:81:9c:b3:f8:6f:23:8c:b9:9e:83:89:3b:
         d1:3b:19:d8:5e:3d:a6:e4:0c:63:6e:37:7b:e7:8a:3e:1f:24:
         f1:67:e2:69:d1:80:14:d0:fd:cd:e9:f4:c6:a4:e9:6c:4a:59:
         47:f9:24:cc:b6:6e:c3:53:2c:16:85:c8:33:df:3d:5a:01:b1:
         29:d5:4f:ab:78:96:ee:bd:95:0b:45:47:ff:8e:7a:8a:a4:6b:
         d8:24:3b:4d:a6:19:5f:24:0e:92:f3:34:bb:ab:72:a5:8c:a5:
         85:12:95:58:59:2c:23:42:5e:7a:ee:29:27:0e:01:9b:3d:da:
         02:79:dd:fa:85:ee:c7:a8:03:13:73:47:6c:31:dd:26:c9:d8:
         98:07:f5:59:e0:fe:48:89:e0:b9:78:98:46:33:92:41:d6:65:
         40:6d:04:a4:79:64:f4:67:57:a1:21:c9:79:95:c7:83:f2:91:
         08:1a:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:20 2024 by rpki-client on console-fra.rpki-client.org